kdc: Pass in HDB_F_ARMOR_PRINCIPAL when fetching armor ticket client principal

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>

diff --git a/kdc/fast.c b/kdc/fast.c
index 1e5bdd45dfd15839db33392261119d5928b7fecc..a037331261a96a18ddf97138ffbfd92f6a532346 100644 (file)
--- a/kdc/fast.c
+++ b/kdc/fast.c
@@ -844,6 +844,7 @@ _kdc_fast_check_armor_pac(astgs_request_t r, int flags)
     hdb_entry *armor_client = NULL;
     char *armor_client_principal_name = NULL;
 
+    flags |= HDB_F_ARMOR_PRINCIPAL;
     if (_kdc_synthetic_princ_used_p(r->context, r->armor_ticket))
        flags |= HDB_F_SYNTHETIC_OK;
     if (r->req.req_body.kdc_options.canonicalize)